the-web-application-hackers-handbook

Index n G–H 863
503 Service Unavailable,
49
Flash, 134–135
bytecode, 141
/crossdomain.xml, 525–526
LSOs, 553
same-origin policy, 525–526
serialized data, 137–138
font-family property, 518–519
forced browsing, application
logic flaws, 411
forgotten password, 584
attackers using, 14
format string vulnerabilities
attackers, 644
causes, 643
detecting, 644
hacker’s methodology, 838
source code, 710
forms
HTML, 58–59
authentication, 160–161
client-side control of user
input with, 127–133
client-side data transmission
with hidden, 118–120
disabled elements, 131–133
intercepting proxy
modifying hidden,
119–120
length limits, 128–129
script-based validation,
129–131
web functionality, 58–60
400 Bad Request, 48
brute-force techniques, 84
401 Unauthorized, 48
brute-force techniques, 84–85
403 Forbidden, 49
brute-force techniques, 84–85
404 Not Found, 49
405 Method Not Allowed, 49
413 Request Entity Too
Large, 49
414 Request URI Too Long,
49
framebusting, UI redress
attacks, 514–515
function callbacks, JavaScript
hijacking, 520
functional paths, web
application pages versus,
93–96
functionality. See web
functionality
function-specific input
vulnerabilities, hacker’s
methodology, 836–841
fuzzing, 572–573
Burp Intruder, 600–602
hacker’s methodology,
parameter, 824–827
integrated testing suites,
762–763
JAttack, 588–590
objective, 586–587
strings, 587
G
general headers, 45
generic error messages, 628
GET method, 42
purpose, 264
GET request, 40
XSS converting, 474–475
getCurrentUserRoles
method, 261
GIFAR files, 485–486
Google, 89
Omitted Results, 90
querying, 90
Google Translate (GT), 530–531
Gray Hat Hacking (Eagle & Harris
& Harper & Ness), 634
GT. See Google Translate
H
hacker’s methodology
access controls
insecure access, 823
limited access, 822–823
multiple accounts, 822
requirements, 821
analysis
attack surface mapping, 800
data entry points, 799
functionality, 798–799
technologies, 799–800
application logic flaws
attack surface, 842
incomplete input, 843
multistage functions,
842–843
transaction logic, 844
trust relationships, 844
application mapping, 795–798
debug parameters, 798
default content, 797
enumerating identifiers,
797–798
hidden content, 796–797
public information resources,
796
of tokens to sessions, 818
visible content, 795–796
authentication
application logic flaws,
811–813
credentials, autogenerated,
809–810
credentials, unsafe
distribution, 810–811
credentials, unsafe
transmission, 810
impersonation, 808–809
insecure web storage, 811
password guessing, 807
password quality, 806
password recovery, 807–808
“remember me” functions,
808
understanding, 805
username enumeration,
806–807
username uniqueness, 809
vulnerability exploitation for
unauthorized access,
813
back-end request injection, 841
browser extensions, 802–804
ActiveX controls, 804
debugger, 803–804
decompiling, 802–803
buffer overflow, 837–838
client-side
data transmission, 801
user input, 801–802
cookie scope, 820–821
CSRF, 820
DOM, 849–850
file inclusion, 835–836
format string vulnerabilities,
838
fuzzing parameters, 824–827
guidelines, 793–794
HTTP header injection, 830
information leakage, 852
input-based vulnerabilities,
824–836
function-specific, 836–841
integer vulnerabilities, 838
LDAP injection, 839–840
local privacy attacks, 850–851
miscellaneous checks, 849–852
native software bugs, 837–838
open redirection
vulnerabilities, 830–831
OS command injection,
832–833
path traversal vulnerabilities,
833–835
reflected XSS, 829–830
same-origin policy, 851–852